SYMBOLCOMMON_NAMEaka. SYNONYMS
win.merlin (Back to overview)

Merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

References
2025-08-28 ⋅ Trend Micro ⋅ Nick Dai, Pierre Lee
TAOTH Campaign Exploits End-of-Support Software to Target Traditional Chinese Users and Dissidents
Cobalt Strike Merlin
2024-01-25 ⋅ JSAC 2024 ⋅ Masafumi Takeda, Tomoya Furukawa
Threat Intelligence of Abused Public Post-Exploitation Frameworks
AsyncRAT DCRat Empire Downloader GRUNT Havoc Koadic Merlin PoshC2 Quasar RAT Sliver
2023-09-25 ⋅ Securonix ⋅ D. Iuzvyk, Oleg Kolesnikov, Tim Peck
Securonix Threat Labs Security Advisory: New STARK#VORTEX Attack Campaign: Threat Actors Use Drone Manual Lures to Deliver MerlinAgent Payloads
Merlin
2022-09-01 ⋅ Medium michaelkoczwara ⋅ Michael Koczwara
Hunting C2/Adversaries Infrastructure with Shodan and Censys
Brute Ratel C4 Cobalt Strike Deimos GRUNT IcedID Merlin Meterpreter Nighthawk PoshC2 Sliver
2019-08-20 ⋅ Github (Ne0nd0g) ⋅ Russel Van Tuyl
Merlin (BETA)
Merlin
2018-02-19 ⋅ ActionDan
Intro to Using GScript for Red Teams
Merlin
2018-02-08 ⋅ Lockboxx ⋅ Action Dan
Merlin for Red Teams
Merlin

There is no Yara-Signature yet.